Update renovate/renovate Docker tag to v41.32.0

Reviewed-on: https://gitea.akshun-lab.uk/akshun/public-k3s/pulls/86

.drone.yml

@@ -0,0 +1,22 @@
+---
+kind: pipeline
+type: kubernetes
+name: renovate
+trigger:
+  event:
+    - cron
+    - custom
+environment:
+  LOG_LEVEL: info
+steps:
+  - name: renovate
+    image: renovate/renovate:41.32.0
+    privileged: true
+    commands:
+      - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
+      - renovate
+    environment:
+      RENOVATE_TOKEN:
+        from_secret: RENOVATE_TOKEN
+      GITHUB_COM_TOKEN:
+        from_secret: GITHUB_COM_TOKEN

.gitea/workflows/renovate.yml

@@ -0,0 +1,22 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: '@daily'
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run Renovate
+        uses: docker://renovate/renovate:41.32.0
+        env:
+          LOG_LEVEL: info
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          GITHUB_COM_TOKEN: ${{ secrets.PAT_TOKEN }}
+        with:
+          args: ''

cluster/apps/drone/drone.yml

@@ -32,6 +32,8 @@ spec:
           image: drone/drone:2
           restartPolicy: Always
           env:
+          - name: DRONE_USER_CREATE
+            value: "DRONE_USER_CREATE=username:akshun,admin:true"
           - name: DRONE_GITEA_SERVER
             value: "https://gitea.akshun-lab.uk"
           - name: DRONE_GITEA_CLIENT_ID

cluster/apps/ghostfolio/ghostfolio.yml

@@ -76,7 +76,7 @@ spec:
               key: postgres-password
       containers:
       - name: ghostfolio
-        image: docker.io/ghostfolio/ghostfolio:2.180.0
+        image: docker.io/ghostfolio/ghostfolio:2.181.0
         securityContext:
           capabilities:
             drop:

cluster/apps/gitea-act/gitea-act-pvc.yml

@@ -0,0 +1,34 @@
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: gitea-act-runner-pv
+  namespace: default
+spec:
+  capacity:
+    storage: 5Gi
+  volumeMode: Filesystem
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  mountOptions:
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /k3s/volumes/gitea-act/
+    server: 10.0.0.123
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: gitea-act-runner-pvc
+  namespace: default
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: ""
+  volumeName: gitea-act-runner-pv
+  resources:
+    requests:
+      storage: 5Gi

cluster/apps/gitea-act/gitea-act.yml

@@ -17,13 +17,14 @@ spec:
       labels:
         app: gitea-act-runner
     spec:
+      hostNetwork: true
       restartPolicy: Always
       volumes:
       - name: docker-certs
         emptyDir: {}
       - name: runner-data
         persistentVolumeClaim:
-          claimName: longhorn-gitea-dind
+          claimName: gitea-act-runner-pvc
       initContainers:
       - name: wait-for-gitea
         image: busybox
@@ -31,7 +32,7 @@ spec:
         - sh
         - -c
         - |
-          while ! nc -z gitea-int-service 3000; do
+          while ! nc -z gitea.akshun-lab.uk 443; do
             echo "Waiting for Gitea to be ready..."
             sleep 5
           done
@@ -48,12 +49,9 @@ spec:
         - name: DOCKER_TLS_VERIFY
           value: "1"
         - name: GITEA_INSTANCE_URL
-          value: https://gitea-int-service:3000
+          value: "https://gitea.akshun-lab.uk"
         - name: GITEA_RUNNER_REGISTRATION_TOKEN
-          valueFrom:
+          value: "NvAHP4f1in4Fpe6VFaiwiN98IR0poOQoDv4dDKcN"
-            secretKeyRef:
-              name: gitea-runner-token
-              key: token
         volumeMounts:
         - name: docker-certs
           mountPath: /certs

cluster/apps/jellyseerr/jellyseerr.yml

@@ -14,6 +14,28 @@ spec:
       labels:
         app: jellyseerr
     spec:
+      initContainers:
+      - name: gluetun
+        image: qmcgaw/gluetun:v3.40.0
+        restartPolicy: Always
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+        envFrom:
+        - configMapRef:
+            name: gluetun-config
+        env:
+        - name: OPENVPN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_PASSWORD
+        - name: OPENVPN_USER
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_USER
       containers:
       - name: jellyseerr
         image: fallenbagel/jellyseerr:2.7.0

cluster/apps/nextcloud/nextcloud.yml

@@ -26,7 +26,7 @@ spec:
             done
       containers:
       - name: nextcloud
-        image: lscr.io/linuxserver/nextcloud:31.0.6
+        image: lscr.io/linuxserver/nextcloud:31.0.7
         ports:
         - containerPort: 443
         env:

cluster/apps/renovate/renovate-job.yml

@@ -15,7 +15,7 @@ spec:
         spec:
           hostNetwork: true
           containers:
-            - image: renovate/renovate:41.27.0
+            - image: renovate/renovate:41.32.0
               name: renovate-bot
               env:
                 - name: RENOVATE_TOKEN

cluster/apps/searxng/searxng.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:a8de13bc467fc7e8d9edf35f71e99dcbb4ead0c965f120f689ab8dffc2999ecc
+        image: searxng/searxng@sha256:54097e8189288082454fc257cf39c51d8059f24efeb07a4abbe0abbc58e38772
         ports:
         - containerPort: 8080
         env:

cluster/apps/speedtest/speedtest.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: speedtest
-        image: lscr.io/linuxserver/speedtest-tracker:1.6.3
+        image: lscr.io/linuxserver/speedtest-tracker:1.6.4
         ports:
         - containerPort: 80
         env:

cluster/config/secrets/drone-gitea-secrets-sealed.yml

@@ -7,9 +7,9 @@ metadata:
   namespace: default
 spec:
   encryptedData:
-    client_id: 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
+    client_id: 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
-    client_secret: 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
+    client_secret: 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
-    rpc_secret: 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
+    rpc_secret: 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
   template:
     metadata:
       creationTimestamp: null

cluster/helm/ollama/ollama-release.yml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: ollama
-      version: "1.22.0"
+      version: "1.24.0"
       sourceRef:
         kind: HelmRepository
         name: ollama